CVE-2020-26603

MEDIUM

Samsung mobile devices O(8.x)-Q(10.0) - Path Traversal

Title source: llm

Description

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Sticker Center allows directory traversal for an unprivileged process to read arbitrary files. The Samsung ID is SVE-2020-18433 (October 2020).

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://security.samsungmobile.com/securityUpdate.smsb

Scores

CVSS v3 5.3

EPSS 0.0048

EPSS Percentile 38.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-22

Status published

Products (4)

google/android 8.0

google/android 8.1

google/android 9.0

google/android 10.0

Published Oct 06, 2020

Tracked Since Feb 18, 2026